The Curaleaf Clinic scam is a healthcare impersonation fraud in which criminals create fake versions of Curaleaf Clinic’s services — including fake booking websites, fake consultation services, and fake prescription fulfilment operations — to steal money and sensitive personal data from patients seeking medical cannabis treatment. Curaleaf Clinic is a genuine, Care Quality Commission registered medical cannabis clinic operating across the UK and providing legal, clinician-led cannabis-based medicine prescriptions to eligible patients. The Curaleaf Clinic scam has nothing to do with the real clinic — it is perpetrated by criminals who use the clinic’s name and branding without any authorisation.

The Curaleaf Clinic scam operates across multiple channels. Fake websites mimic the design and content of Curaleaf Clinic’s official portal. Paid search advertisements direct patients searching for “medical cannabis UK” or “Curaleaf appointment” to fraudulent booking pages. Social media advertisements promise fast-track consultations and guaranteed prescriptions at competitive prices. WhatsApp and Telegram contacts claiming to be Curaleaf representatives offer private consultation services outside official channels. Fake online pharmacies claim to dispense Curaleaf-prescribed cannabis products at discounted prices.

What makes the Curaleaf Clinic scam uniquely harmful is the vulnerability of its targets combined with the dual nature of the theft. Unlike most consumer frauds — where the primary harm is financial — the Curaleaf Clinic scam also harvests detailed medical history, NHS numbers, prescription information, and other health data that can be used for medical identity fraud, insurance fraud, blackmail, or sold to data brokers operating in criminal markets. The same identity-theft exploitation underpins our imposter scam warning signs guide.

Almost every Curaleaf Clinic scam follows the same five-stage pattern, from the paid advertisement that captures the patient through to the disappearance of the fraudulent operation.

Step 1: Reaching the Patient Through Advertising or Search

The Curaleaf Clinic scam typically reaches its targets through one of three pathways. The first is paid search advertising — scammers pay for fraudulent websites to appear at the top of Google and Bing search results for terms like “Curaleaf Clinic appointment”, “medical cannabis prescription UK”, or “private cannabis clinic”. Patients who click these paid results may land on a fraudulent page before they ever see the genuine Curaleaf Clinic website. The second pathway is social media advertising — Facebook, Instagram, and TikTok ads promising fast-track consultations, guaranteed prescriptions, or exclusive access at discounted prices, targeted at users who have shown interest in medical cannabis or chronic pain management. The third pathway is direct outreach through WhatsApp, Telegram, or social media DMs, with the operator claiming to be a Curaleaf representative arranging consultations outside the standard booking process.

Step 2: The Convincing Fake Booking Portal

Once the patient reaches the Curaleaf Clinic scam operator’s website or messaging channel, they encounter a highly convincing fraudulent environment. Fake websites use Curaleaf’s logo, brand colours, and professional medical photography. They display the names of real or fabricated doctors, include CQC registration numbers that may belong to a completely different organisation, and publish consultation pricing broadly consistent with the legitimate market to avoid raising suspicion on price alone. The fake booking portal asks the patient to complete a detailed medical history form before their consultation. This serves a dual purpose: it creates the impression of a thorough, legitimate clinical process, and it harvests an exceptionally detailed and sensitive medical profile — including conditions, current medications, medical history, and NHS number.

Step 3: Collecting the Booking Fee

After completing the medical history form, the patient is asked to pay a consultation booking fee. In the Curaleaf Clinic scam, this fee is typically set at a realistic price — £50 to £150 — consistent with what a genuine private medical cannabis consultation costs. Paying a realistic fee reinforces the patient’s belief that they are dealing with a legitimate clinic. Payment methods vary — some fraudulent sites accept card payments through poorly secured gateways (harvesting full card details), others direct patients to bank transfer, PayPal Friends and Family, or cryptocurrency, payment methods that offer little or no buyer protection.

Step 4: The Escalating Fee Extraction

The most financially damaging Curaleaf Clinic scam variants do not stop at the initial booking fee. After the consultation fee is paid, patients receive a follow-up communication claiming their consultation has been reviewed and a prescription has been prepared — but that they must now pay a prescription processing fee, a pharmacy dispensing charge, a regulatory compliance fee, or a delivery fee before the medication can be released. Each payment is framed as a legitimate and unavoidable step. Patients who have already invested £100 to £200 in booking fees are psychologically primed to continue paying — the sunk cost dynamic. Some patients have paid multiple fees totalling £500 or more before the fraudulent operator finally disappears.

Step 5: The Disappearance and Relaunch

At a certain point — either when the patient runs out of money to pay further fees, becomes suspicious, or when the operator decides they have extracted sufficient value — all contact ceases. The website may disappear or stop responding. The WhatsApp number blocks the patient. Email correspondence goes unanswered. The consultation never happens, the prescription never arrives, and the patient is left with a financial loss, a stolen medical profile, and no treatment. The fraudulent Curaleaf Clinic scam website is then typically taken down and replaced with a new domain and slightly different branding — ready to target the next wave of patients. This cycle of operation, detection, and relaunch is what allows the Curaleaf Clinic scam to persist despite regulatory efforts.

The Curaleaf Clinic scam adapts to whichever access route the patient is most likely to use — paid search, social media, WhatsApp outreach, fake pharmacy, or prescription transfer. These are the five most reported variants.

The Chronic Pain Patient

The Curaleaf Clinic scam routinely targets people exhausted by years of failed conventional treatment. A man in his fifties had been living with severe chronic back pain for over a decade after a workplace injury. Having exhausted the treatments available through his GP and found that opioid-based pain relief was causing unacceptable side effects, he began researching medical cannabis as an alternative. He found a website that appeared to be Curaleaf Clinic through a Google search — it had been listed above the genuine site through a paid advertisement that turned out to be the Curaleaf Clinic scam. He completed a detailed medical history form, paid a £120 consultation fee, and received a confirmation email with a booking reference number. Two days before his scheduled consultation, he received a message — actually a Curaleaf Clinic scam follow-up — saying his medical records had been reviewed and a prescription had been prepared, but a £95 pharmacy processing fee was required to proceed. He paid this fee. He then received a further request for a £60 “MHRA compliance verification” fee. At this point he became suspicious and called Curaleaf Clinic’s official number to verify his booking — he was told no record of his booking existed. The Curaleaf Clinic scam had taken £275 from him and he remained without treatment.

The Parent Seeking Help for Their Child

The Curaleaf Clinic scam exploits parents in the most devastating circumstances. A mother whose nine-year-old son had treatment-resistant epilepsy had spent years trying to obtain a medical cannabis prescription through NHS channels without success. She saw a Facebook advertisement for what appeared to be a Curaleaf Clinic fast-track service for paediatric epilepsy cases, offered at a promotional price of £180 for an initial consultation with a specialist. She made contact through the link in the advertisement and was connected with a WhatsApp contact who identified themselves as a Curaleaf patient coordinator. She provided comprehensive medical records for her son, completed a detailed family medical history form, and paid £180 via bank transfer. The appointment never materialised — the WhatsApp contact stopped responding the day before the scheduled consultation. The Curaleaf Clinic scam had not only taken her money but had placed her son’s detailed medical records in criminal hands.

The Mental Health Patient

The Curaleaf Clinic scam also targets existing patients trying to transfer their care. A woman in her late thirties with severe treatment-resistant PTSD had been prescribed medical cannabis through a different clinic but was looking to transfer her prescription to Curaleaf Clinic based on a recommendation from a support group. She found what she believed to be Curaleaf’s online transfer service through a search engine result. The Curaleaf Clinic scam website asked her to upload her existing prescription, her full medical history, her current medication list, and her personal identification documents as part of the transfer process. She uploaded all of these documents before paying a £150 transfer fee. The documents — which included her diagnosis, prescription details, and identity documents — were now in the hands of criminals. When she received a further request for a £200 “prescription transfer compliance fee”, she contacted Curaleaf Clinic directly and discovered the fraud. She reported the incident to Action Fraud and her bank but was deeply concerned about what might happen to her sensitive medical and identity data.

The Curaleaf Clinic scam exists within a regulatory landscape that takes healthcare fraud extremely seriously — but the speed at which fraudulent websites appear and disappear makes enforcement challenging. Multiple UK regulatory bodies have published guidance specifically relevant to this type of fraud.

The Care Quality Commission is the independent regulator of health and social care in England and maintains a public register of all CQC-registered services. Any clinic claiming to provide medical services in England must be CQC registered. Patients can verify Curaleaf Clinic’s genuine CQC registration and check that any clinic they are considering is legitimately registered at cqc.org.uk. If a service cannot be found on the CQC register, it should not be used under any circumstances.

The Medicines and Healthcare products Regulatory Agency regulates medicines and medical devices in the UK. The MHRA has published guidance on the legal framework for cannabis-based products for medicinal use and warns patients to only obtain medical cannabis through registered clinics with qualified prescribers. Patients who receive or are offered cannabis products through unregistered channels — including those connected to the Curaleaf Clinic scam — should report this to the MHRA at gov.uk/mhra.

Action Fraud — the UK’s national fraud and cybercrime reporting centre — accepts reports of healthcare fraud including the Curaleaf Clinic scam through its online reporting tool at actionfraud.police.uk and by telephone on 0300 123 2040. Action Fraud uses complaint data to identify fraud networks and pass cases to the National Fraud Intelligence Bureau for investigation.

The Information Commissioner’s Office oversees data protection in the UK under the UK GDPR. Patients whose sensitive medical data has been stolen through the Curaleaf Clinic scam may have grounds to report the data breach to the ICO at ico.org.uk. While the ICO’s primary role is regulatory rather than compensatory, reporting the data theft creates an official record and contributes to investigation of the fraud operation.

Only Book Through the Official Curaleaf Clinic Website

The single most effective protection against the Curaleaf Clinic scam is to only ever interact with Curaleaf Clinic through its official website at curaleafclinic.com. Do not book through any website reached via a social media advertisement, a paid search result, or a link in an unsolicited message — every one of those routes is a potential Curaleaf Clinic scam entry point. Type the URL directly into your browser or use a bookmark you created yourself from a previously verified visit. This one habit makes the Curaleaf Clinic scam essentially impossible to fall victim to.

Verify CQC Registration Before Providing Any Information

Before providing any personal information — let alone sensitive medical information — to any medical cannabis clinic, verify their CQC registration at cqc.org.uk. Search specifically for the clinic name and confirm that the registration details match what is published on their official website. The Curaleaf Clinic scam may display CQC numbers on fake websites, but those numbers may belong to a different, unrelated organisation. Verification takes two minutes and provides absolute confirmation of legitimacy — and is the most reliable single check against the Curaleaf Clinic scam.

Never Share Medical Records Through Unverified Channels

Your medical records, prescription information, NHS number, and diagnosis details are among the most sensitive personal data you possess. Never upload or share these documents through any portal or messaging service that you have not independently verified as belonging to the genuine clinic. The Curaleaf Clinic scam uses detailed medical history forms as a primary data harvesting mechanism — the information collected has value far beyond the consultation fee paid.

Pay Only Through Secure, Traceable Payment Methods

Always pay for medical consultations using a credit card through a verified, secure payment gateway on the clinic’s confirmed genuine website. Credit card payments give you chargeback rights if the service is not delivered. Never pay via bank transfer, cryptocurrency, or PayPal Friends and Family for medical services — these payment methods offer little or no recourse and are a characteristic feature of the Curaleaf Clinic scam and similar healthcare frauds. The same payment-method-as-warning-sign pattern is documented in our PayPal Friends and Family scam guide.

Be Sceptical of Fast-Track and Guaranteed Prescription Offers

Medical cannabis prescribing in the UK is a regulated clinical process that requires a qualified specialist to assess the patient’s medical history and determine whether cannabis-based medicine is clinically appropriate. Any service offering a guaranteed prescription, a fast-track process that bypasses clinical assessment, or unusually rapid access to controlled medicines should be treated as a likely Curaleaf Clinic scam or a service operating outside the law.

Call Curaleaf Clinic Directly to Verify Any Communication

If you receive any communication claiming to be from Curaleaf Clinic — particularly through social media, WhatsApp, or email — verify it by calling Curaleaf Clinic’s official phone number published on curaleafclinic.com before taking any action. Do not use any phone number provided in the communication itself — it may be a fake customer service line staffed by Curaleaf Clinic scam operators. A direct call to the genuine clinic takes two minutes and provides complete certainty about whether the communication is authentic.

If you have already made a payment to a fraudulent service or shared sensitive medical and personal data through a Curaleaf Clinic scam website or contact, act fast. The sooner you act, the better your chances of limiting both the financial and personal damage.